spinnaker-poc

Spinnaker Vulnerability POCs Proof-of-concept demonstrations for CVE-2026-32604 and CVE-2026-32613, two 10.0 severity vulnerabilities in Spinnaker that allow for code execution and production cloud credential theft. Video walkthrough of how to use these POCS Technical blog with more details...

io.camunda:camunda-zeebe (>=8.9.0-alpha5-rc1, <=8.9.0-alpha5), io.camunda:tasklist-webapp (>=8.9.0-alpha5-rc1, <=8.9.0-alpha5) +11 more potentially affected by CVE-2026-103007 via org.elasticsearch:elasticsearch (>=8.16.0, <=8.19.21)

org.elasticsearch:elasticsearch MAVEN version =8.16.0, =8.9.0-alpha5-rc1, =8.9.0-alpha5-rc1, =main-272, =main-272, =main-272, =0.96.0, =7.29.0, =8.16.0, =8.16.0, =3.0.0-rc1, =1.7.es8171.0, =8.16.0, =8.19.21 Source cves: CVE-2026-103007 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-20937074...

Deserialization of Untrusted Data

Overview io.spinnaker.orca:orca-clouddriver is a Spinnaker Orca Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the YAML processing. An attacker can execute arbitrary code by supplying crafted YAML input that triggers unsafe class loading during operations...

io.spinnaker.keel:keel-artifact (>=2026.0-19, <=2026.0-23), io.spinnaker.keel:keel-bakery-plugin (>=2026.0-19, <=2026.0-23) +19 more potentially affected by CVE-2026-44795 via io.spinnaker.keel:keel-core (>=2026.0-19, <=2026.0-23)

io.spinnaker.keel:keel-core MAVEN version =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-23 and more Source cves: CVE-2026-44795 Source advisory...

io.spinnaker.orca:orca-applications (8.17.1), io.spinnaker.orca:orca-bakery (8.17.1) +25 more potentially affected by CVE-2026-44795 via io.spinnaker.orca:orca-core (8.17.1)

io.spinnaker.orca:orca-core MAVEN version 8.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.orca:orca-core and may be impacted: - io.spinnaker.orca:orca-applications 8.17.1 - io.spinnaker.orca:orca-bakery 8.17.1 -...

io.spinnaker.orca:orca-api-tck (8.18.2), io.spinnaker.orca:orca-applications (8.18.2) +38 more potentially affected by CVE-2026-44795 via io.spinnaker.orca:orca-core (8.18.2)

io.spinnaker.orca:orca-core MAVEN version 8.18.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.orca:orca-core and may be impacted: - io.spinnaker.orca:orca-api-tck 8.18.2 - io.spinnaker.orca:orca-applications 8.18.2 -...

io.spinnaker.orca:orca-api-tck (8.20.0), io.spinnaker.orca:orca-applications (8.20.0) +38 more potentially affected by CVE-2026-44795 via io.spinnaker.orca:orca-core (8.20.0)

io.spinnaker.orca:orca-core MAVEN version 8.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.orca:orca-core and may be impacted: - io.spinnaker.orca:orca-api-tck 8.20.0 - io.spinnaker.orca:orca-applications 8.20.0 -...

io.spinnaker.orca:orca-api-tck (8.24.3), io.spinnaker.orca:orca-applications (8.24.3) +38 more potentially affected by CVE-2026-44795 via io.spinnaker.orca:orca-core (8.24.3)

io.spinnaker.orca:orca-core MAVEN version 8.24.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.orca:orca-core and may be impacted: - io.spinnaker.orca:orca-api-tck 8.24.3 - io.spinnaker.orca:orca-applications 8.24.3 -...

io.spinnaker.orca:orca-api-tck (8.34.0), io.spinnaker.orca:orca-applications (8.34.0) +38 more potentially affected by CVE-2026-44795 via io.spinnaker.orca:orca-core (8.34.0)

io.spinnaker.orca:orca-core MAVEN version 8.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.orca:orca-core and may be impacted: - io.spinnaker.orca:orca-api-tck 8.34.0 - io.spinnaker.orca:orca-applications 8.34.0 -...

io.spinnaker.orca:orca-api-tck (8.36.1), io.spinnaker.orca:orca-applications (8.36.1) +38 more potentially affected by CVE-2026-44795 via io.spinnaker.orca:orca-core (8.36.1)

io.spinnaker.orca:orca-core MAVEN version 8.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.orca:orca-core and may be impacted: - io.spinnaker.orca:orca-api-tck 8.36.1 - io.spinnaker.orca:orca-applications 8.36.1 -...

io.spinnaker.orca:orca-api-tck (8.38.0), io.spinnaker.orca:orca-applications (8.38.0) +38 more potentially affected by CVE-2026-44795 via io.spinnaker.orca:orca-core (8.38.0)

io.spinnaker.orca:orca-core MAVEN version 8.38.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.orca:orca-core and may be impacted: - io.spinnaker.orca:orca-api-tck 8.38.0 - io.spinnaker.orca:orca-applications 8.38.0 -...

io.spinnaker.orca:orca-api-tck (8.39.0), io.spinnaker.orca:orca-applications (8.39.0) +38 more potentially affected by CVE-2026-44795 via io.spinnaker.orca:orca-core (8.39.0)

io.spinnaker.orca:orca-core MAVEN version 8.39.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.orca:orca-core and may be impacted: - io.spinnaker.orca:orca-api-tck 8.39.0 - io.spinnaker.orca:orca-applications 8.39.0 -...

io.spinnaker.orca:orca-api-tck (8.42.0), io.spinnaker.orca:orca-applications (8.42.0) +38 more potentially affected by CVE-2026-44795 via io.spinnaker.orca:orca-core (8.42.0)

io.spinnaker.orca:orca-core MAVEN version 8.42.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.orca:orca-core and may be impacted: - io.spinnaker.orca:orca-api-tck 8.42.0 - io.spinnaker.orca:orca-applications 8.42.0 -...

io.spinnaker.orca:orca-api-tck (8.45.0), io.spinnaker.orca:orca-applications (8.45.0) +38 more potentially affected by CVE-2026-44795 via io.spinnaker.orca:orca-core (8.45.0)

io.spinnaker.orca:orca-core MAVEN version 8.45.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.orca:orca-core and may be impacted: - io.spinnaker.orca:orca-api-tck 8.45.0 - io.spinnaker.orca:orca-applications 8.45.0 -...

io.spinnaker.orca:orca-api-tck (8.50.0), io.spinnaker.orca:orca-applications (8.50.0) +38 more potentially affected by CVE-2026-44795 via io.spinnaker.orca:orca-core (8.50.0)

io.spinnaker.orca:orca-core MAVEN version 8.50.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.orca:orca-core and may be impacted: - io.spinnaker.orca:orca-api-tck 8.50.0 - io.spinnaker.orca:orca-applications 8.50.0 -...

io.spinnaker.orca:orca-api-tck (8.52.0), io.spinnaker.orca:orca-applications (8.52.0) +38 more potentially affected by CVE-2026-44795 via io.spinnaker.orca:orca-core (8.52.0)

io.spinnaker.orca:orca-core MAVEN version 8.52.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.orca:orca-core and may be impacted: - io.spinnaker.orca:orca-api-tck 8.52.0 - io.spinnaker.orca:orca-applications 8.52.0 -...

io.spinnaker.orca:orca-api-tck (8.53.0), io.spinnaker.orca:orca-applications (8.53.0) +38 more potentially affected by CVE-2026-44795 via io.spinnaker.orca:orca-core (8.53.0)

io.spinnaker.orca:orca-core MAVEN version 8.53.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.orca:orca-core and may be impacted: - io.spinnaker.orca:orca-api-tck 8.53.0 - io.spinnaker.orca:orca-applications 8.53.0 -...

io.spinnaker.orca:orca-api-tck (8.56.0), io.spinnaker.orca:orca-applications (8.56.0) +38 more potentially affected by CVE-2026-44795 via io.spinnaker.orca:orca-core (8.56.0)

io.spinnaker.orca:orca-core MAVEN version 8.56.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.orca:orca-core and may be impacted: - io.spinnaker.orca:orca-api-tck 8.56.0 - io.spinnaker.orca:orca-applications 8.56.0 -...

io.spinnaker.orca:orca-api-tck (8.62.0), io.spinnaker.orca:orca-applications (8.62.0) +38 more potentially affected by CVE-2026-44795 via io.spinnaker.orca:orca-core (8.62.0)

io.spinnaker.orca:orca-core MAVEN version 8.62.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.orca:orca-core and may be impacted: - io.spinnaker.orca:orca-api-tck 8.62.0 - io.spinnaker.orca:orca-applications 8.62.0 -...

io.spinnaker.orca:orca-api-tck (>=2026.0-19, <=2026.0-23), io.spinnaker.orca:orca-applications (>=2026.0-19, <=2026.0-23) +12 more potentially affected by CVE-2026-44795 via io.spinnaker.orca:orca-clouddriver (>=2026.0-19, <=2026.0-23)

io.spinnaker.orca:orca-clouddriver MAVEN version =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-23 Source cves: CVE-2026-44795 Source advisory:...